@axtary/cli 0.0.1 → 0.2.0

package/dist/claude-code-hook.js

@@ -0,0 +1,326 @@
+import { realpathSync } from "node:fs";
+import { basename, dirname, isAbsolute, join, relative, resolve } from "node:path";
+import { parseNormalizedAction, } from "@axtary/actionpass";
+import { classifyShellFileOps, } from "./shell-file-normalize.js";
+export const CLAUDE_CODE_HOOK_SCHEMA_VERSION = "axtary.claude_code_hook.v0";
+export const DEFAULT_PROXY_URL = "http://127.0.0.1:7331";
+export const DEFAULT_HOOK_TIMEOUT_MS = 5_000;
+export function parseClaudeCodeHookPayload(payloadText) {
+    let raw;
+    try {
+        raw = JSON.parse(payloadText);
+    }
+    catch {
+        throw new Error("claude_code_hook_payload_invalid_json");
+    }
+    if (!raw || typeof raw !== "object" || Array.isArray(raw)) {
+        throw new Error("claude_code_hook_payload_not_object");
+    }
+    const record = raw;
+    const toolName = record.tool_name;
+    if (typeof toolName !== "string" || toolName.length === 0) {
+        throw new Error("claude_code_hook_tool_name_required");
+    }
+    const toolInput = record.tool_input && typeof record.tool_input === "object" && !Array.isArray(record.tool_input)
+        ? record.tool_input
+        : {};
+    return {
+        sessionId: typeof record.session_id === "string" ? record.session_id : null,
+        cwd: typeof record.cwd === "string" ? record.cwd : null,
+        toolName,
+        toolInput,
+    };
+}
+const READ_TOOLS = {
+    Read: "file_path",
+    Glob: "path",
+    Grep: "path",
+};
+const WRITE_TOOLS = {
+    Write: "file_path",
+    Edit: "file_path",
+    NotebookEdit: "notebook_path",
+};
+const SHELL_TOOLS = new Set(["Bash"]);
+export function normalizeClaudeCodeToolCall(payload, options = {}) {
+    if (SHELL_TOOLS.has(payload.toolName)) {
+        const command = typeof payload.toolInput.command === "string"
+            ? payload.toolInput.command
+            : "";
+        const ops = command ? classifyShellFileOps(command) : [];
+        if (ops.length === 0) {
+            return { mapped: false, reason: `claude_code_shell_no_file_op:${payload.toolName}` };
+        }
+        // Every file op a command performs is governed (e.g. `cp secret dest`
+        // governs the source read AND the destination write); the run loop denies
+        // if any op is denied. Fail-closed across the whole command.
+        const actions = ops.map((op) => buildShellContentAction(op, payload, options));
+        return { mapped: true, action: actions[0], actions };
+    }
+    const readPathField = READ_TOOLS[payload.toolName];
+    const writePathField = WRITE_TOOLS[payload.toolName];
+    if (!readPathField && !writePathField) {
+        return {
+            mapped: false,
+            reason: `claude_code_tool_unmapped:${payload.toolName}`,
+        };
+    }
+    const pathField = readPathField ?? writePathField;
+    const rawPath = payload.toolInput[pathField];
+    const path = workspaceRelativePath(typeof rawPath === "string" && rawPath.length > 0 ? rawPath : ".", payload.cwd);
+    const repoResource = options.repoResource ?? "repo:local/workspace";
+    const taskId = payload.sessionId
+        ? `claude-code:${payload.sessionId.slice(0, 12)}`
+        : "claude-code:session";
+    const base = {
+        actor: {
+            agentId: "agent:claude-code",
+            humanOwner: options.humanOwner ?? "user:local-developer",
+            runtime: "claude-code",
+        },
+        intent: {
+            taskId,
+            declaredGoal: `Claude Code ${payload.toolName} tool call`,
+        },
+    };
+    if (readPathField) {
+        const action = parseNormalizedAction({
+            ...base,
+            capability: {
+                tool: "github.contents.read",
+                resource: repoResource,
+                payload: {
+                    path,
+                    source: "claude-code-hook",
+                    claudeCodeTool: payload.toolName,
+                },
+            },
+        });
+        return { mapped: true, action, actions: [action] };
+    }
+    const action = parseNormalizedAction({
+        ...base,
+        capability: {
+            tool: "github.contents.write",
+            resource: repoResource,
+            payload: {
+                path,
+                branch: options.branch ?? "workspace",
+                source: "claude-code-hook",
+                claudeCodeTool: payload.toolName,
+            },
+        },
+    });
+    return { mapped: true, action, actions: [action] };
+}
+function buildShellContentAction(op, payload, options) {
+    const path = workspaceRelativePath(op.path, payload.cwd);
+    const repoResource = options.repoResource ?? "repo:local/workspace";
+    const taskId = payload.sessionId
+        ? `claude-code:${payload.sessionId.slice(0, 12)}`
+        : "claude-code:session";
+    const base = {
+        actor: {
+            agentId: "agent:claude-code",
+            humanOwner: options.humanOwner ?? "user:local-developer",
+            runtime: "claude-code",
+        },
+        intent: {
+            taskId,
+            declaredGoal: `Claude Code ${payload.toolName} tool call`,
+        },
+    };
+    if (op.kind === "read") {
+        return parseNormalizedAction({
+            ...base,
+            capability: {
+                tool: "github.contents.read",
+                resource: repoResource,
+                payload: {
+                    path,
+                    source: "claude-code-hook",
+                    claudeCodeTool: payload.toolName,
+                },
+            },
+        });
+    }
+    return parseNormalizedAction({
+        ...base,
+        capability: {
+            tool: "github.contents.write",
+            resource: repoResource,
+            payload: {
+                path,
+                branch: options.branch ?? "workspace",
+                source: "claude-code-hook",
+                claudeCodeTool: payload.toolName,
+            },
+        },
+    });
+}
+export async function runClaudeCodeHook(input) {
+    let payload;
+    try {
+        payload = parseClaudeCodeHookPayload(input.payloadText);
+    }
+    catch (error) {
+        return decisionResult(null, null, "deny", [
+            `Axtary blocked this tool call: hook payload could not be parsed (${errorReason(error)}). Protected actions fail closed.`,
+        ]);
+    }
+    const normalization = normalizeClaudeCodeToolCall(payload, {
+        repoResource: input.repoResource,
+        humanOwner: input.humanOwner,
+        branch: input.branch,
+    });
+    if (!normalization.mapped) {
+        return {
+            schemaVersion: CLAUDE_CODE_HOOK_SCHEMA_VERSION,
+            status: "no_opinion",
+            tool: payload.toolName,
+            normalizedTool: null,
+            reason: normalization.reason,
+            output: null,
+            exitCode: 0,
+        };
+    }
+    const proxyUrl = (input.proxyUrl ?? DEFAULT_PROXY_URL).replace(/\/$/, "");
+    const fetchImpl = input.fetch ?? globalThis.fetch;
+    const timeoutMs = input.timeoutMs ?? DEFAULT_HOOK_TIMEOUT_MS;
+    // Authorize every governed op (e.g. both the source read and destination write
+    // of `cp secret dest`); the most restrictive decision wins — deny > step_up >
+    // allow — and a hard deny short-circuits the rest. Fail-closed.
+    let best = null;
+    for (const action of normalization.actions) {
+        let response;
+        try {
+            response = await postAuthorize(fetchImpl, `${proxyUrl}/authorize`, action, timeoutMs);
+        }
+        catch (error) {
+            return decisionResult(payload.toolName, action.capability.tool, "deny", [
+                `Axtary blocked this tool call: local proxy unreachable at ${proxyUrl} (${errorReason(error)}).`,
+                "Start it with: axtary proxy --config axtary.yml",
+            ]);
+        }
+        const rank = authorizeRank(response.status);
+        if (!best || rank > best.rank) {
+            best = { action, response, rank };
+        }
+        if (rank === DENY_RANK)
+            break; // hard deny is maximal
+    }
+    const response = best.response;
+    const normalizedTool = best.action.capability.tool;
+    const reasons = response.decision?.reasons ?? [];
+    const hints = response.hints ?? [];
+    const summary = response.explanation?.summary ?? reasons.join(", ");
+    const ledgerLine = typeof response.ledger?.lineNumber === "number"
+        ? ` Ledger line ${response.ledger.lineNumber}.`
+        : "";
+    if (response.status === "authorized") {
+        return decisionResult(payload.toolName, normalizedTool, "allow", [
+            `Axtary authorized ${normalizedTool}: ${summary}${ledgerLine}`,
+        ]);
+    }
+    if (response.status === "step_up") {
+        return decisionResult(payload.toolName, normalizedTool, "ask", [
+            `Axtary requires step-up review for ${normalizedTool}: ${summary}`,
+            ...hints,
+            ledgerLine.trim(),
+        ]);
+    }
+    return decisionResult(payload.toolName, normalizedTool, "deny", [
+        `Axtary blocked ${normalizedTool}: ${summary}`,
+        ...hints,
+        ledgerLine.trim(),
+    ]);
+}
+export const DENY_RANK = 3;
+/** Severity rank for picking the most restrictive decision across ops. */
+export function authorizeRank(status) {
+    if (status === "blocked" || status === "malformed")
+        return DENY_RANK;
+    if (status === "step_up")
+        return 2;
+    return 1; // authorized
+}
+export async function postAuthorize(fetchImpl, url, action, timeoutMs) {
+    if (!fetchImpl) {
+        throw new Error("fetch_unavailable");
+    }
+    const response = await fetchImpl(url, {
+        method: "POST",
+        headers: { "content-type": "application/json" },
+        body: JSON.stringify(action),
+        signal: AbortSignal.timeout(timeoutMs),
+    });
+    const body = (await response.json());
+    if (!response.ok && response.status !== 400) {
+        throw new Error(`proxy_authorize_http_${response.status}`);
+    }
+    if (body.status !== "authorized" &&
+        body.status !== "step_up" &&
+        body.status !== "blocked" &&
+        body.status !== "malformed") {
+        throw new Error("proxy_authorize_response_invalid");
+    }
+    return body;
+}
+function decisionResult(tool, normalizedTool, decision, reasonParts) {
+    const reason = reasonParts.filter((part) => part.length > 0).join(" ");
+    return {
+        schemaVersion: CLAUDE_CODE_HOOK_SCHEMA_VERSION,
+        status: decision,
+        tool,
+        normalizedTool,
+        reason,
+        output: JSON.stringify({
+            hookSpecificOutput: {
+                hookEventName: "PreToolUse",
+                permissionDecision: decision,
+                permissionDecisionReason: reason,
+            },
+        }),
+        exitCode: 0,
+    };
+}
+export function workspaceRelativePath(path, cwd) {
+    if (!isAbsolute(path)) {
+        return path;
+    }
+    const base = resolve(cwd ?? process.cwd());
+    const bases = unique([base, resolveSymlinks(base)]);
+    const candidates = unique([path, resolveSymlinks(path)]);
+    for (const candidatePath of candidates) {
+        for (const candidateBase of bases) {
+            const relativePath = relative(candidateBase, candidatePath);
+            if (relativePath.length === 0) {
+                return ".";
+            }
+            if (!relativePath.startsWith("..")) {
+                return relativePath;
+            }
+        }
+    }
+    return path;
+}
+function resolveSymlinks(path) {
+    try {
+        return realpathSync(path);
+    }
+    catch {
+        try {
+            return join(realpathSync(dirname(path)), basename(path));
+        }
+        catch {
+            return path;
+        }
+    }
+}
+function unique(values) {
+    return [...new Set(values)];
+}
+export function errorReason(error) {
+    return error instanceof Error ? error.message : "unknown_error";
+}
+//# sourceMappingURL=claude-code-hook.js.map

package/dist/claude-code-hook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-code-hook.js","sourceRoot":"","sources":["../src/claude-code-hook.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEnF,OAAO,EACL,qBAAqB,GAGtB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,oBAAoB,GAErB,MAAM,2BAA2B,CAAC;AAEnC,MAAM,CAAC,MAAM,+BAA+B,GAAG,4BAA4B,CAAC;AAC5E,MAAM,CAAC,MAAM,iBAAiB,GAAG,uBAAuB,CAAC;AACzD,MAAM,CAAC,MAAM,uBAAuB,GAAG,KAAK,CAAC;AAyC7C,MAAM,UAAU,0BAA0B,CAAC,WAAmB;IAC5D,IAAI,GAAY,CAAC;IAEjB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IAED,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IAED,MAAM,MAAM,GAAG,GAA8B,CAAC;IAC9C,MAAM,QAAQ,GAAG,MAAM,CAAC,SAAS,CAAC;IAElC,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IAED,MAAM,SAAS,GACb,MAAM,CAAC,UAAU,IAAI,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC;QAC7F,CAAC,CAAE,MAAM,CAAC,UAAwC;QAClD,CAAC,CAAC,EAAE,CAAC;IAET,OAAO;QACL,SAAS,EAAE,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI;QAC3E,GAAG,EAAE,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI;QACvD,QAAQ;QACR,SAAS;KACV,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,GAA2B;IACzC,IAAI,EAAE,WAAW;IACjB,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,MAAM;CACb,CAAC;AAEF,MAAM,WAAW,GAA2B;IAC1C,KAAK,EAAE,WAAW;IAClB,IAAI,EAAE,WAAW;IACjB,YAAY,EAAE,eAAe;CAC9B,CAAC;AAEF,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;AAEtC,MAAM,UAAU,2BAA2B,CACzC,OAA8B,EAC9B,UAAsC,EAAE;IAExC,IAAI,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtC,MAAM,OAAO,GACX,OAAO,OAAO,CAAC,SAAS,CAAC,OAAO,KAAK,QAAQ;YAC3C,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO;YAC3B,CAAC,CAAC,EAAE,CAAC;QACT,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrB,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,gCAAgC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;QACvF,CAAC;QACD,sEAAsE;QACtE,0EAA0E;QAC1E,6DAA6D;QAC7D,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,uBAAuB,CAAC,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;QAC/E,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAE,EAAE,OAAO,EAAE,CAAC;IACxD,CAAC;IAED,MAAM,aAAa,GAAG,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACnD,MAAM,cAAc,GAAG,WAAW,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAErD,IAAI,CAAC,aAAa,IAAI,CAAC,cAAc,EAAE,CAAC;QACtC,OAAO;YACL,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,6BAA6B,OAAO,CAAC,QAAQ,EAAE;SACxD,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,aAAa,IAAI,cAAe,CAAC;IACnD,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAG,qBAAqB,CAChC,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EACjE,OAAO,CAAC,GAAG,CACZ,CAAC;IACF,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,sBAAsB,CAAC;IACpE,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS;QAC9B,CAAC,CAAC,eAAe,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;QACjD,CAAC,CAAC,qBAAqB,CAAC;IAC1B,MAAM,IAAI,GAAG;QACX,KAAK,EAAE;YACL,OAAO,EAAE,mBAAmB;YAC5B,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,sBAAsB;YACxD,OAAO,EAAE,aAAa;SACvB;QACD,MAAM,EAAE;YACN,MAAM;YACN,YAAY,EAAE,eAAe,OAAO,CAAC,QAAQ,YAAY;SAC1D;KACF,CAAC;IAEF,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,MAAM,GAAG,qBAAqB,CAAC;YACnC,GAAG,IAAI;YACP,UAAU,EAAE;gBACV,IAAI,EAAE,sBAAsB;gBAC5B,QAAQ,EAAE,YAAY;gBACtB,OAAO,EAAE;oBACP,IAAI;oBACJ,MAAM,EAAE,kBAAkB;oBAC1B,cAAc,EAAE,OAAO,CAAC,QAAQ;iBACjC;aACF;SACF,CAAC,CAAC;QACH,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;IACrD,CAAC;IAED,MAAM,MAAM,GAAG,qBAAqB,CAAC;QACnC,GAAG,IAAI;QACP,UAAU,EAAE;YACV,IAAI,EAAE,uBAAuB;YAC7B,QAAQ,EAAE,YAAY;YACtB,OAAO,EAAE;gBACP,IAAI;gBACJ,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,WAAW;gBACrC,MAAM,EAAE,kBAAkB;gBAC1B,cAAc,EAAE,OAAO,CAAC,QAAQ;aACjC;SACF;KACF,CAAC,CAAC;IACH,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;AACrD,CAAC;AAED,SAAS,uBAAuB,CAC9B,EAAe,EACf,OAA8B,EAC9B,OAAmC;IAEnC,MAAM,IAAI,GAAG,qBAAqB,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IACzD,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,sBAAsB,CAAC;IACpE,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS;QAC9B,CAAC,CAAC,eAAe,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;QACjD,CAAC,CAAC,qBAAqB,CAAC;IAC1B,MAAM,IAAI,GAAG;QACX,KAAK,EAAE;YACL,OAAO,EAAE,mBAAmB;YAC5B,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,sBAAsB;YACxD,OAAO,EAAE,aAAa;SACvB;QACD,MAAM,EAAE;YACN,MAAM;YACN,YAAY,EAAE,eAAe,OAAO,CAAC,QAAQ,YAAY;SAC1D;KACF,CAAC;IAEF,IAAI,EAAE,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QACvB,OAAO,qBAAqB,CAAC;YAC3B,GAAG,IAAI;YACP,UAAU,EAAE;gBACV,IAAI,EAAE,sBAAsB;gBAC5B,QAAQ,EAAE,YAAY;gBACtB,OAAO,EAAE;oBACP,IAAI;oBACJ,MAAM,EAAE,kBAAkB;oBAC1B,cAAc,EAAE,OAAO,CAAC,QAAQ;iBACjC;aACF;SACF,CAAC,CAAC;IACL,CAAC;IAED,OAAO,qBAAqB,CAAC;QAC3B,GAAG,IAAI;QACP,UAAU,EAAE;YACV,IAAI,EAAE,uBAAuB;YAC7B,QAAQ,EAAE,YAAY;YACtB,OAAO,EAAE;gBACP,IAAI;gBACJ,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,WAAW;gBACrC,MAAM,EAAE,kBAAkB;gBAC1B,cAAc,EAAE,OAAO,CAAC,QAAQ;aACjC;SACF;KACF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,KAA6B;IAE7B,IAAI,OAA8B,CAAC;IAEnC,IAAI,CAAC;QACH,OAAO,GAAG,0BAA0B,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAC1D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,cAAc,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE;YACxC,oEAAoE,WAAW,CAAC,KAAK,CAAC,mCAAmC;SAC1H,CAAC,CAAC;IACL,CAAC;IAED,MAAM,aAAa,GAAG,2BAA2B,CAAC,OAAO,EAAE;QACzD,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC,CAAC;IAEH,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC;QAC1B,OAAO;YACL,aAAa,EAAE,+BAA+B;YAC9C,MAAM,EAAE,YAAY;YACpB,IAAI,EAAE,OAAO,CAAC,QAAQ;YACtB,cAAc,EAAE,IAAI;YACpB,MAAM,EAAE,aAAa,CAAC,MAAM;YAC5B,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE,CAAC;SACZ,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,CAAC,KAAK,CAAC,QAAQ,IAAI,iBAAiB,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC1E,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;IAClD,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,uBAAuB,CAAC;IAE7D,+EAA+E;IAC/E,8EAA8E;IAC9E,gEAAgE;IAChE,IAAI,IAAI,GACN,IAAI,CAAC;IAEP,KAAK,MAAM,MAAM,IAAI,aAAa,CAAC,OAAO,EAAE,CAAC;QAC3C,IAAI,QAAoC,CAAC;QACzC,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,aAAa,CAC5B,SAAS,EACT,GAAG,QAAQ,YAAY,EACvB,MAAM,EACN,SAAS,CACV,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,cAAc,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE;gBACtE,6DAA6D,QAAQ,KAAK,WAAW,CAAC,KAAK,CAAC,IAAI;gBAChG,iDAAiD;aAClD,CAAC,CAAC;QACL,CAAC;QAED,MAAM,IAAI,GAAG,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC5C,IAAI,CAAC,IAAI,IAAI,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAC9B,IAAI,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QACpC,CAAC;QACD,IAAI,IAAI,KAAK,SAAS;YAAE,MAAM,CAAC,uBAAuB;IACxD,CAAC;IAED,MAAM,QAAQ,GAAG,IAAK,CAAC,QAAQ,CAAC;IAChC,MAAM,cAAc,GAAG,IAAK,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC;IACpD,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,EAAE,OAAO,IAAI,EAAE,CAAC;IACjD,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC;IACnC,MAAM,OAAO,GAAG,QAAQ,CAAC,WAAW,EAAE,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpE,MAAM,UAAU,GACd,OAAO,QAAQ,CAAC,MAAM,EAAE,UAAU,KAAK,QAAQ;QAC7C,CAAC,CAAC,gBAAgB,QAAQ,CAAC,MAAM,CAAC,UAAU,GAAG;QAC/C,CAAC,CAAC,EAAE,CAAC;IAET,IAAI,QAAQ,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;QACrC,OAAO,cAAc,CAAC,OAAO,CAAC,QAAQ,EAAE,cAAc,EAAE,OAAO,EAAE;YAC/D,qBAAqB,cAAc,KAAK,OAAO,GAAG,UAAU,EAAE;SAC/D,CAAC,CAAC;IACL,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAClC,OAAO,cAAc,CAAC,OAAO,CAAC,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE;YAC7D,sCAAsC,cAAc,KAAK,OAAO,EAAE;YAClE,GAAG,KAAK;YACR,UAAU,CAAC,IAAI,EAAE;SAClB,CAAC,CAAC;IACL,CAAC;IAED,OAAO,cAAc,CAAC,OAAO,CAAC,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE;QAC9D,kBAAkB,cAAc,KAAK,OAAO,EAAE;QAC9C,GAAG,KAAK;QACR,UAAU,CAAC,IAAI,EAAE;KAClB,CAAC,CAAC;AACL,CAAC;AAUD,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,CAAC;AAE3B,0EAA0E;AAC1E,MAAM,UAAU,aAAa,CAAC,MAA4C;IACxE,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,WAAW;QAAE,OAAO,SAAS,CAAC;IACrE,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,CAAC,CAAC;IACnC,OAAO,CAAC,CAAC,CAAC,aAAa;AACzB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,SAAmC,EACnC,GAAW,EACX,MAAwB,EACxB,SAAiB;IAEjB,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACvC,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE;QACpC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;QAC5B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC;KACvC,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA+B,CAAC;IAEnE,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,wBAAwB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED,IACE,IAAI,CAAC,MAAM,KAAK,YAAY;QAC5B,IAAI,CAAC,MAAM,KAAK,SAAS;QACzB,IAAI,CAAC,MAAM,KAAK,SAAS;QACzB,IAAI,CAAC,MAAM,KAAK,WAAW,EAC3B,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,cAAc,CACrB,IAAmB,EACnB,cAA6B,EAC7B,QAAkC,EAClC,WAAqB;IAErB,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAEvE,OAAO;QACL,aAAa,EAAE,+BAA+B;QAC9C,MAAM,EAAE,QAAQ;QAChB,IAAI;QACJ,cAAc;QACd,MAAM;QACN,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC;YACrB,kBAAkB,EAAE;gBAClB,aAAa,EAAE,YAAY;gBAC3B,kBAAkB,EAAE,QAAQ;gBAC5B,wBAAwB,EAAE,MAAM;aACjC;SACF,CAAC;QACF,QAAQ,EAAE,CAAC;KACZ,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,IAAY,EAAE,GAAkB;IACpE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpD,MAAM,UAAU,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAEzD,KAAK,MAAM,aAAa,IAAI,UAAU,EAAE,CAAC;QACvC,KAAK,MAAM,aAAa,IAAI,KAAK,EAAE,CAAC;YAClC,MAAM,YAAY,GAAG,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;YAE5D,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC9B,OAAO,GAAG,CAAC;YACb,CAAC;YAED,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnC,OAAO,YAAY,CAAC;YACtB,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,eAAe,CAAC,IAAY;IACnC,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,MAAM,CAAC,MAAgB;IAC9B,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;AAClE,CAAC"}

package/dist/codex-hook.d.ts

@@ -0,0 +1,48 @@
+import { type JsonValue, type NormalizedAction } from "@axtary/actionpass";
+export { classifyShellCommand, classifyShellFileOps } from "./shell-file-normalize.js";
+export declare const CODEX_HOOK_SCHEMA_VERSION = "axtary.codex_hook.v0";
+export type CodexHookPayload = {
+    hookEventName: string | null;
+    sessionId: string | null;
+    cwd: string | null;
+    toolName: string;
+    toolInput: Record<string, JsonValue>;
+};
+export type CodexNormalization = {
+    mapped: true;
+    action: NormalizedAction;
+    actions: NormalizedAction[];
+} | {
+    mapped: false;
+    reason: string;
+};
+export type CodexNormalizeOptions = {
+    repoResource?: string;
+    humanOwner?: string;
+    branch?: string;
+};
+export type CodexHookRunInput = {
+    payloadText: string;
+    proxyUrl?: string;
+    repoResource?: string;
+    humanOwner?: string;
+    branch?: string;
+    timeoutMs?: number;
+    fetch?: typeof fetch;
+};
+export type CodexHookRunResult = {
+    schemaVersion: typeof CODEX_HOOK_SCHEMA_VERSION;
+    /** Proxy decision semantics; `no_opinion` emits no decision. */
+    status: "allow" | "step_up" | "deny" | "no_opinion";
+    tool: string | null;
+    normalizedTool: string | null;
+    reason: string | null;
+    /** JSON for stdout (Codex `hookSpecificOutput`), or null for no opinion. */
+    output: string | null;
+    /** Always 0: decisions (incl. fail-closed denials) live in the JSON. */
+    exitCode: number;
+};
+export declare function parseCodexHookPayload(payloadText: string): CodexHookPayload;
+export declare function normalizeCodexToolCall(payload: CodexHookPayload, options?: CodexNormalizeOptions): CodexNormalization;
+export declare function runCodexHook(input: CodexHookRunInput): Promise<CodexHookRunResult>;
+//# sourceMappingURL=codex-hook.d.ts.map

package/dist/codex-hook.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-hook.d.ts","sourceRoot":"","sources":["../src/codex-hook.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,SAAS,EACd,KAAK,gBAAgB,EACtB,MAAM,oBAAoB,CAAC;AAkB5B,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAoBvF,eAAO,MAAM,yBAAyB,yBAAyB,CAAC;AAEhE,MAAM,MAAM,gBAAgB,GAAG;IAC7B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;CACtC,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAC1B;IAAE,MAAM,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,gBAAgB,CAAC;IAAC,OAAO,EAAE,gBAAgB,EAAE,CAAA;CAAE,GACvE;IAAE,MAAM,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEtC,MAAM,MAAM,qBAAqB,GAAG;IAClC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,aAAa,EAAE,OAAO,yBAAyB,CAAC;IAChD,gEAAgE;IAChE,MAAM,EAAE,OAAO,GAAG,SAAS,GAAG,MAAM,GAAG,YAAY,CAAC;IACpD,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,4EAA4E;IAC5E,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,wEAAwE;IACxE,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,wBAAgB,qBAAqB,CAAC,WAAW,EAAE,MAAM,GAAG,gBAAgB,CAmC3E;AAkED,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,gBAAgB,EACzB,OAAO,GAAE,qBAA0B,GAClC,kBAAkB,CAoDpB;AAMD,wBAAsB,YAAY,CAChC,KAAK,EAAE,iBAAiB,GACvB,OAAO,CAAC,kBAAkB,CAAC,CAwG7B"}

package/dist/codex-hook.js

@@ -0,0 +1,259 @@
+import { parseNormalizedAction, } from "@axtary/actionpass";
+import { authorizeRank, DENY_RANK, DEFAULT_HOOK_TIMEOUT_MS, DEFAULT_PROXY_URL, errorReason, postAuthorize, workspaceRelativePath, } from "./claude-code-hook.js";
+import { classifyMcpFilesystemTool } from "./mcp-fs-normalize.js";
+import { classifyShellFileOps, } from "./shell-file-normalize.js";
+export { classifyShellCommand, classifyShellFileOps } from "./shell-file-normalize.js";
+// Codex CLI runtime-hook adapter (mega-plan M8.4). Codex calls a configured
+// `PreToolUse` hook before it runs a tool; the hook reads a JSON payload on
+// stdin and returns a decision. Codex's hook contract is Claude-Code-shaped —
+// it emits the same `hookSpecificOutput.permissionDecision` object — so the
+// output side mirrors the Claude hook exactly. Verified against the official
+// Codex hooks docs (2026-06-26).
+//
+// What differs from Claude/Cursor: Codex's reliable hook surface is the SHELL
+// (`Bash`) tool, whose `tool_input.command` is a shell command string — not a
+// file path. So the core work here is mapping a file-touching shell command
+// (and, best-effort, `apply_patch` edits and MCP filesystem tools) onto the
+// same `github.contents.read/write` actions, so the existing secret/path policy
+// applies. Codex docs note hooks fire reliably for shell, less so for
+// apply_patch / most MCP tools — hence those are best-effort.
+//
+// Fail-closed: a step-up renders as a BLOCK on Codex (its PreToolUse contract
+// documents only allow/deny; we do not rely on an unverified "ask"), and any
+// error (bad payload / unreachable proxy) is an explicit deny.
+export const CODEX_HOOK_SCHEMA_VERSION = "axtary.codex_hook.v0";
+export function parseCodexHookPayload(payloadText) {
+    let raw;
+    try {
+        raw = JSON.parse(payloadText);
+    }
+    catch {
+        throw new Error("codex_hook_payload_invalid_json");
+    }
+    if (!raw || typeof raw !== "object" || Array.isArray(raw)) {
+        throw new Error("codex_hook_payload_not_object");
+    }
+    const record = raw;
+    const toolName = record.tool_name;
+    if (typeof toolName !== "string" || toolName.length === 0) {
+        throw new Error("codex_hook_tool_name_required");
+    }
+    const toolInput = record.tool_input &&
+        typeof record.tool_input === "object" &&
+        !Array.isArray(record.tool_input)
+        ? record.tool_input
+        : {};
+    return {
+        hookEventName: typeof record.hook_event_name === "string" ? record.hook_event_name : null,
+        sessionId: typeof record.session_id === "string" ? record.session_id : null,
+        cwd: typeof record.cwd === "string" ? record.cwd : null,
+        toolName,
+        toolInput,
+    };
+}
+const SHELL_TOOLS = new Set(["Bash", "shell", "local_shell"]);
+// Codex apply_patch envelope headers name the files touched.
+const APPLY_PATCH_FILE_RE = /^\*\*\*\s+(?:Add|Update|Delete)\s+File:\s+(.+?)\s*$/gm;
+function applyPatchPaths(command) {
+    const paths = [];
+    let match;
+    APPLY_PATCH_FILE_RE.lastIndex = 0;
+    while ((match = APPLY_PATCH_FILE_RE.exec(command))) {
+        paths.push(match[1]);
+    }
+    return paths;
+}
+function buildContentAction(op, payload, options, sourceTool) {
+    const path = workspaceRelativePath(op.path, payload.cwd);
+    const repoResource = options.repoResource ?? "repo:local/workspace";
+    const taskId = payload.sessionId
+        ? `codex:${payload.sessionId.slice(0, 12)}`
+        : "codex:session";
+    const base = {
+        actor: {
+            agentId: "agent:codex",
+            humanOwner: options.humanOwner ?? "user:local-developer",
+            runtime: "codex",
+        },
+        intent: {
+            taskId,
+            declaredGoal: `Codex ${payload.toolName} tool call`,
+        },
+    };
+    if (op.kind === "read") {
+        return parseNormalizedAction({
+            ...base,
+            capability: {
+                tool: "github.contents.read",
+                resource: repoResource,
+                payload: { path, source: "codex-hook", codexTool: sourceTool },
+            },
+        });
+    }
+    return parseNormalizedAction({
+        ...base,
+        capability: {
+            tool: "github.contents.write",
+            resource: repoResource,
+            payload: {
+                path,
+                branch: options.branch ?? "workspace",
+                source: "codex-hook",
+                codexTool: sourceTool,
+            },
+        },
+    });
+}
+export function normalizeCodexToolCall(payload, options = {}) {
+    // Shell (the reliable Codex surface): map every file op a command performs,
+    // so `cp secret dest` governs the source read AND the destination write.
+    if (SHELL_TOOLS.has(payload.toolName)) {
+        const command = typeof payload.toolInput.command === "string"
+            ? payload.toolInput.command
+            : "";
+        const ops = command ? classifyShellFileOps(command) : [];
+        if (ops.length === 0) {
+            return { mapped: false, reason: `codex_shell_no_file_op:${payload.toolName}` };
+        }
+        return mappedActions(ops.map((op) => buildContentAction(op, payload, options, payload.toolName)));
+    }
+    // apply_patch (best-effort): the envelope names every file it edits; govern
+    // all of them (the run loop denies if any is denied).
+    if (payload.toolName === "apply_patch") {
+        const command = typeof payload.toolInput.command === "string"
+            ? payload.toolInput.command
+            : "";
+        const paths = command ? applyPatchPaths(command) : [];
+        if (paths.length === 0) {
+            return { mapped: false, reason: "codex_apply_patch_no_files" };
+        }
+        return mappedActions(paths.map((path) => buildContentAction({ kind: "write", path }, payload, options, payload.toolName)));
+    }
+    // MCP filesystem tools (best-effort; Codex MCP hooks fire less reliably).
+    const classified = classifyMcpFilesystemTool(payload.toolName);
+    if (classified) {
+        const rawPath = payload.toolInput[classified.pathField];
+        if (typeof rawPath === "string" && rawPath.length > 0) {
+            return mappedActions([
+                buildContentAction({ kind: classified.kind, path: rawPath }, payload, options, payload.toolName),
+            ]);
+        }
+    }
+    return { mapped: false, reason: `codex_tool_unmapped:${payload.toolName}` };
+}
+function mappedActions(actions) {
+    return { mapped: true, action: actions[0], actions };
+}
+export async function runCodexHook(input) {
+    let payload;
+    try {
+        payload = parseCodexHookPayload(input.payloadText);
+    }
+    catch (error) {
+        return decisionResult(null, null, "deny", [
+            `Axtary blocked this tool call: hook payload could not be parsed (${errorReason(error)}). Protected actions fail closed.`,
+        ]);
+    }
+    const normalization = normalizeCodexToolCall(payload, {
+        repoResource: input.repoResource,
+        humanOwner: input.humanOwner,
+        branch: input.branch,
+    });
+    if (!normalization.mapped) {
+        return {
+            schemaVersion: CODEX_HOOK_SCHEMA_VERSION,
+            status: "no_opinion",
+            tool: payload.toolName,
+            normalizedTool: null,
+            reason: normalization.reason,
+            output: null,
+            exitCode: 0,
+        };
+    }
+    const proxyUrl = (input.proxyUrl ?? DEFAULT_PROXY_URL).replace(/\/$/, "");
+    const fetchImpl = input.fetch ?? globalThis.fetch;
+    const timeoutMs = input.timeoutMs ?? DEFAULT_HOOK_TIMEOUT_MS;
+    // Authorize every governed op; the most restrictive decision wins
+    // (deny > step_up > allow) and a hard deny short-circuits. Fail-closed.
+    let best = null;
+    for (const action of normalization.actions) {
+        let response;
+        try {
+            response = await postAuthorize(fetchImpl, `${proxyUrl}/authorize`, action, timeoutMs);
+        }
+        catch (error) {
+            return decisionResult(payload.toolName, action.capability.tool, "deny", [
+                `Axtary blocked ${action.capability.tool}: local proxy unreachable at ${proxyUrl} (${errorReason(error)}).`,
+                "Start it with: axtary proxy --config axtary.yml",
+            ]);
+        }
+        const rank = authorizeRank(response.status);
+        if (!best || rank > best.rank) {
+            best = { action, response, rank };
+        }
+        if (rank === DENY_RANK)
+            break;
+    }
+    const response = best.response;
+    const normalizedTool = best.action.capability.tool;
+    const reasons = response.decision?.reasons ?? [];
+    const hints = response.hints ?? [];
+    const summary = response.explanation?.summary ?? reasons.join(", ");
+    const ledgerLine = typeof response.ledger?.lineNumber === "number"
+        ? ` Ledger line ${response.ledger.lineNumber}.`
+        : "";
+    if (response.status === "authorized") {
+        // Live-verified against Codex CLI v0.142.3: emitting
+        // `permissionDecision:"allow"` errors the hook ("unsupported
+        // permissionDecision:allow") and Codex then fails open. For an allow we emit
+        // NO decision so Codex proceeds normally; the decision is already recorded by
+        // the /authorize call above (only `deny` is honored on PreToolUse).
+        return {
+            schemaVersion: CODEX_HOOK_SCHEMA_VERSION,
+            status: "allow",
+            tool: payload.toolName,
+            normalizedTool,
+            reason: `Axtary authorized ${normalizedTool}: ${summary}${ledgerLine}`,
+            output: null,
+            exitCode: 0,
+        };
+    }
+    if (response.status === "step_up") {
+        // Codex PreToolUse honors only `deny`; we block step-up (fail closed) rather
+        // than rely on an unverified interactive "ask", and point to the
+        // payload-bound approval path.
+        return decisionResult(payload.toolName, normalizedTool, "step_up", [
+            `Axtary blocked ${normalizedTool} pending human step-up approval: ${summary}`,
+            ...hints,
+            "Approve the exact payload via the Axtary dashboard / proxy approval path before re-running.",
+            ledgerLine.trim(),
+        ]);
+    }
+    return decisionResult(payload.toolName, normalizedTool, "deny", [
+        `Axtary blocked ${normalizedTool}: ${summary}`,
+        ...hints,
+        ledgerLine.trim(),
+    ]);
+}
+// Codex PreToolUse honors only `permissionDecision:"deny"` (allow/ask are
+// rejected as unsupported, v0.142.3), so every blocking decision — an explicit
+// deny, a fail-closed step-up, or an error — renders as a deny.
+function decisionResult(tool, normalizedTool, status, reasonParts) {
+    const reason = reasonParts.filter((part) => part.length > 0).join(" ");
+    return {
+        schemaVersion: CODEX_HOOK_SCHEMA_VERSION,
+        status,
+        tool,
+        normalizedTool,
+        reason,
+        output: JSON.stringify({
+            hookSpecificOutput: {
+                hookEventName: "PreToolUse",
+                permissionDecision: "deny",
+                permissionDecisionReason: reason,
+            },
+        }),
+        exitCode: 0,
+    };
+}
+//# sourceMappingURL=codex-hook.js.map

package/dist/codex-hook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-hook.js","sourceRoot":"","sources":["../src/codex-hook.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qBAAqB,GAGtB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,aAAa,EACb,SAAS,EACT,uBAAuB,EACvB,iBAAiB,EACjB,WAAW,EACX,aAAa,EACb,qBAAqB,GAEtB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAC;AAClE,OAAO,EACL,oBAAoB,GAErB,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAEvF,4EAA4E;AAC5E,4EAA4E;AAC5E,8EAA8E;AAC9E,4EAA4E;AAC5E,6EAA6E;AAC7E,iCAAiC;AACjC,EAAE;AACF,8EAA8E;AAC9E,8EAA8E;AAC9E,4EAA4E;AAC5E,4EAA4E;AAC5E,gFAAgF;AAChF,sEAAsE;AACtE,8DAA8D;AAC9D,EAAE;AACF,8EAA8E;AAC9E,6EAA6E;AAC7E,+DAA+D;AAC/D,MAAM,CAAC,MAAM,yBAAyB,GAAG,sBAAsB,CAAC;AA2ChE,MAAM,UAAU,qBAAqB,CAAC,WAAmB;IACvD,IAAI,GAAY,CAAC;IAEjB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IAED,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnD,CAAC;IAED,MAAM,MAAM,GAAG,GAA8B,CAAC;IAC9C,MAAM,QAAQ,GAAG,MAAM,CAAC,SAAS,CAAC;IAElC,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnD,CAAC;IAED,MAAM,SAAS,GACb,MAAM,CAAC,UAAU;QACjB,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ;QACrC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC;QAC/B,CAAC,CAAE,MAAM,CAAC,UAAwC;QAClD,CAAC,CAAC,EAAE,CAAC;IAET,OAAO;QACL,aAAa,EACX,OAAO,MAAM,CAAC,eAAe,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI;QAC5E,SAAS,EAAE,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI;QAC3E,GAAG,EAAE,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI;QACvD,QAAQ;QACR,SAAS;KACV,CAAC;AACJ,CAAC;AAED,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC;AAE9D,6DAA6D;AAC7D,MAAM,mBAAmB,GAAG,uDAAuD,CAAC;AAEpF,SAAS,eAAe,CAAC,OAAe;IACtC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,KAA6B,CAAC;IAClC,mBAAmB,CAAC,SAAS,GAAG,CAAC,CAAC;IAClC,OAAO,CAAC,KAAK,GAAG,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QACnD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,kBAAkB,CACzB,EAAe,EACf,OAAyB,EACzB,OAA8B,EAC9B,UAAkB;IAElB,MAAM,IAAI,GAAG,qBAAqB,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IACzD,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,sBAAsB,CAAC;IACpE,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS;QAC9B,CAAC,CAAC,SAAS,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;QAC3C,CAAC,CAAC,eAAe,CAAC;IACpB,MAAM,IAAI,GAAG;QACX,KAAK,EAAE;YACL,OAAO,EAAE,aAAa;YACtB,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,sBAAsB;YACxD,OAAO,EAAE,OAAO;SACjB;QACD,MAAM,EAAE;YACN,MAAM;YACN,YAAY,EAAE,SAAS,OAAO,CAAC,QAAQ,YAAY;SACpD;KACF,CAAC;IAEF,IAAI,EAAE,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QACvB,OAAO,qBAAqB,CAAC;YAC3B,GAAG,IAAI;YACP,UAAU,EAAE;gBACV,IAAI,EAAE,sBAAsB;gBAC5B,QAAQ,EAAE,YAAY;gBACtB,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,UAAU,EAAE;aAC/D;SACF,CAAC,CAAC;IACL,CAAC;IAED,OAAO,qBAAqB,CAAC;QAC3B,GAAG,IAAI;QACP,UAAU,EAAE;YACV,IAAI,EAAE,uBAAuB;YAC7B,QAAQ,EAAE,YAAY;YACtB,OAAO,EAAE;gBACP,IAAI;gBACJ,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,WAAW;gBACrC,MAAM,EAAE,YAAY;gBACpB,SAAS,EAAE,UAAU;aACtB;SACF;KACF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,OAAyB,EACzB,UAAiC,EAAE;IAEnC,4EAA4E;IAC5E,yEAAyE;IACzE,IAAI,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtC,MAAM,OAAO,GACX,OAAO,OAAO,CAAC,SAAS,CAAC,OAAO,KAAK,QAAQ;YAC3C,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO;YAC3B,CAAC,CAAC,EAAE,CAAC;QACT,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrB,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,0BAA0B,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;QACjF,CAAC;QACD,OAAO,aAAa,CAClB,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,kBAAkB,CAAC,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAC5E,CAAC;IACJ,CAAC;IAED,4EAA4E;IAC5E,sDAAsD;IACtD,IAAI,OAAO,CAAC,QAAQ,KAAK,aAAa,EAAE,CAAC;QACvC,MAAM,OAAO,GACX,OAAO,OAAO,CAAC,SAAS,CAAC,OAAO,KAAK,QAAQ;YAC3C,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO;YAC3B,CAAC,CAAC,EAAE,CAAC;QACT,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACtD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAC;QACjE,CAAC;QACD,OAAO,aAAa,CAClB,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACjB,kBAAkB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,CAChF,CACF,CAAC;IACJ,CAAC;IAED,0EAA0E;IAC1E,MAAM,UAAU,GAAG,yBAAyB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC/D,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QACxD,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtD,OAAO,aAAa,CAAC;gBACnB,kBAAkB,CAChB,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,EACxC,OAAO,EACP,OAAO,EACP,OAAO,CAAC,QAAQ,CACjB;aACF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;AAC9E,CAAC;AAED,SAAS,aAAa,CAAC,OAA2B;IAChD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAE,EAAE,OAAO,EAAE,CAAC;AACxD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,KAAwB;IAExB,IAAI,OAAyB,CAAC;IAE9B,IAAI,CAAC;QACH,OAAO,GAAG,qBAAqB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACrD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,cAAc,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE;YACxC,oEAAoE,WAAW,CAAC,KAAK,CAAC,mCAAmC;SAC1H,CAAC,CAAC;IACL,CAAC;IAED,MAAM,aAAa,GAAG,sBAAsB,CAAC,OAAO,EAAE;QACpD,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC,CAAC;IAEH,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC;QAC1B,OAAO;YACL,aAAa,EAAE,yBAAyB;YACxC,MAAM,EAAE,YAAY;YACpB,IAAI,EAAE,OAAO,CAAC,QAAQ;YACtB,cAAc,EAAE,IAAI;YACpB,MAAM,EAAE,aAAa,CAAC,MAAM;YAC5B,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE,CAAC;SACZ,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,CAAC,KAAK,CAAC,QAAQ,IAAI,iBAAiB,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC1E,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;IAClD,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,uBAAuB,CAAC;IAE7D,kEAAkE;IAClE,wEAAwE;IACxE,IAAI,IAAI,GACN,IAAI,CAAC;IAEP,KAAK,MAAM,MAAM,IAAI,aAAa,CAAC,OAAO,EAAE,CAAC;QAC3C,IAAI,QAAoC,CAAC;QACzC,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,aAAa,CAC5B,SAAS,EACT,GAAG,QAAQ,YAAY,EACvB,MAAM,EACN,SAAS,CACV,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,cAAc,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE;gBACtE,kBAAkB,MAAM,CAAC,UAAU,CAAC,IAAI,gCAAgC,QAAQ,KAAK,WAAW,CAAC,KAAK,CAAC,IAAI;gBAC3G,iDAAiD;aAClD,CAAC,CAAC;QACL,CAAC;QACD,MAAM,IAAI,GAAG,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC5C,IAAI,CAAC,IAAI,IAAI,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAC9B,IAAI,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QACpC,CAAC;QACD,IAAI,IAAI,KAAK,SAAS;YAAE,MAAM;IAChC,CAAC;IAED,MAAM,QAAQ,GAAG,IAAK,CAAC,QAAQ,CAAC;IAChC,MAAM,cAAc,GAAG,IAAK,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC;IACpD,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,EAAE,OAAO,IAAI,EAAE,CAAC;IACjD,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC;IACnC,MAAM,OAAO,GAAG,QAAQ,CAAC,WAAW,EAAE,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpE,MAAM,UAAU,GACd,OAAO,QAAQ,CAAC,MAAM,EAAE,UAAU,KAAK,QAAQ;QAC7C,CAAC,CAAC,gBAAgB,QAAQ,CAAC,MAAM,CAAC,UAAU,GAAG;QAC/C,CAAC,CAAC,EAAE,CAAC;IAET,IAAI,QAAQ,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;QACrC,qDAAqD;QACrD,6DAA6D;QAC7D,6EAA6E;QAC7E,8EAA8E;QAC9E,oEAAoE;QACpE,OAAO;YACL,aAAa,EAAE,yBAAyB;YACxC,MAAM,EAAE,OAAO;YACf,IAAI,EAAE,OAAO,CAAC,QAAQ;YACtB,cAAc;YACd,MAAM,EAAE,qBAAqB,cAAc,KAAK,OAAO,GAAG,UAAU,EAAE;YACtE,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE,CAAC;SACZ,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAClC,6EAA6E;QAC7E,iEAAiE;QACjE,+BAA+B;QAC/B,OAAO,cAAc,CAAC,OAAO,CAAC,QAAQ,EAAE,cAAc,EAAE,SAAS,EAAE;YACjE,kBAAkB,cAAc,oCAAoC,OAAO,EAAE;YAC7E,GAAG,KAAK;YACR,6FAA6F;YAC7F,UAAU,CAAC,IAAI,EAAE;SAClB,CAAC,CAAC;IACL,CAAC;IAED,OAAO,cAAc,CAAC,OAAO,CAAC,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE;QAC9D,kBAAkB,cAAc,KAAK,OAAO,EAAE;QAC9C,GAAG,KAAK;QACR,UAAU,CAAC,IAAI,EAAE;KAClB,CAAC,CAAC;AACL,CAAC;AAED,0EAA0E;AAC1E,+EAA+E;AAC/E,gEAAgE;AAChE,SAAS,cAAc,CACrB,IAAmB,EACnB,cAA6B,EAC7B,MAA0B,EAC1B,WAAqB;IAErB,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAEvE,OAAO;QACL,aAAa,EAAE,yBAAyB;QACxC,MAAM;QACN,IAAI;QACJ,cAAc;QACd,MAAM;QACN,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC;YACrB,kBAAkB,EAAE;gBAClB,aAAa,EAAE,YAAY;gBAC3B,kBAAkB,EAAE,MAAM;gBAC1B,wBAAwB,EAAE,MAAM;aACjC;SACF,CAAC;QACF,QAAQ,EAAE,CAAC;KACZ,CAAC;AACJ,CAAC"}